nicholasjackson / cnitch
Container Snitch checks running processes under the Docker Engine and alerts if any are found to be running as root
☆78Updated 7 years ago
Alternatives and similar repositories for cnitch:
Users that are interested in cnitch are comparing it to the libraries listed below
- Falco container runtime security extras (default rulesets and more)☆49Updated 5 years ago
- Aqua Enterprise scanner as a plug-in vulnerability scanner in the Harbor registry☆36Updated 4 months ago
- Kubernetes security scanner based on the open-source container vulnerability scanner Trivy.☆23Updated 4 years ago
- Web Application Firewall (WAF) on Kubernetes☆68Updated 3 years ago
- ⛔️ DEPRECATED Kubernetes operator and CLI tool for encrypting and managing Kubernetes secrets☆65Updated 7 months ago
- a tool to audit the istio service mesh☆173Updated 3 years ago
- ☆29Updated last month
- Bash wrapper script for Aquasec Microscanner☆61Updated 5 years ago
- Docker authentication plugin to enforce a image pull policy. Whitelist Docker images allowed to be pulled.☆42Updated 7 years ago
- Kubernetes admission webhook that uses cosign verify to check the subject and issuer of the image matches what you expect☆23Updated last week
- A @HashiCorp Vault plugin for authenticating and receiving policies via Slack.☆50Updated 5 years ago
- ☆33Updated 5 years ago
- Dockerfile Security Checker using OPA Rego policies with Conftest☆59Updated 2 years ago
- Generate K8s RBAC policies based on e2e test runs☆28Updated 3 years ago
- INTERCEPT / Policy as Code Auditing & Compliance☆83Updated last month
- A GitHub App that uses kubeval to validate all of that Kubernetes YAML in your repo☆94Updated 3 years ago
- A tool to pass Vault secrets to other processes via environment variables.☆33Updated 6 years ago
- Continuous Zero-Downtime Deployments for Kubernetes & Istio☆27Updated 6 years ago
- Because Clair needs a friend☆31Updated 5 years ago
- Kubernetes Ingress and Service monitoring of HTTP/HTTPS requests☆22Updated 4 years ago
- Alcide Kubernetes Audit Log Analyzer - Alcide kAudit☆36Updated 3 years ago
- Prometheus metrics exporter for HashiCorp Vault☆38Updated 2 years ago
- Owasp Zap chart for Kubernetes☆49Updated 3 years ago
- Hands-on with Vault on Kubernetes Tutorial☆79Updated 5 years ago
- KubeSanity a sanity checking framework for Kubernetes☆84Updated 7 years ago
- ☆55Updated 7 years ago
- Links and resources for the O'Reilly Kubernetes Security book☆98Updated 4 years ago
- Kubernetes Common Configuration Scoring System☆124Updated 2 years ago
- The Container Security Book—a free book for practitioners☆82Updated 4 years ago
- Container Security Workshop covering using Falco on Kubernetes.☆105Updated 3 years ago